CVE-2019-25713

🗓️ 12 Apr 2026 12:28:57Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 4 Views🌐 WEB

CVE-2019-25713: MyT-PM 1.5.1 has SQL injection via Charge[group_total] enabling authenticated attackers to run queries through POST /charge/admin.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2019-25713	12 Apr 202612:28	–	attackerkb
Circl	CVE-2019-25713	12 Apr 202604:16	–	circl
CNNVD	MyT SQL注入漏洞	12 Apr 202600:00	–	cnnvd
Cvelist	CVE-2019-25713 MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter	12 Apr 202612:28	–	cvelist
EUVD	EUVD-2019-20149	12 Apr 202615:30	–	euvd
NVD	CVE-2019-25713	12 Apr 202613:16	–	nvd
Positive Technologies	PT-2026-32175	12 Apr 202600:00	–	ptsecurity
Vulnrichment	CVE-2019-25713 MyT-PM 1.5.1 SQL Injection via Charge[group_total] Parameter	12 Apr 202612:28	–	vulnrichment

NVD

Vulners

Node

myt_project mytMatch1.5.1

[
  {
    "vendor": "MyT",
    "product": "Project Management",
    "versions": [
      {
        "version": "1.5.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sourceforge	www.sourceforge.net/projects/myt/
manageyourteam	www.manageyourteam.net/
vulncheck	www.vulncheck.com/advisories/myt-pm-sql-injection-via-charge-group-total-parameter
exploit-db	www.exploit-db.com/exploits/46084

Parameter	Position	Path	Description	CWE
Charge[group_total]	request body	/charge/admin	SQL injection via Charge[group_total] parameter in /charge/admin allowing authenticated attackers to execute arbitrary SQL	CWE-89

17 Apr 2026 14:04Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.1 - 8.1

CVSS 47.1

EPSS0.00034

SSVC

CWE-89